Ferry Astika Saputra Workshop Administrasi Jaringan SAMBA PROTOCOL

Provides interoperability of resources between Linux/Unix hosts and hosts running MS Windows OS. What is SAMBA?

In early 1992, Andrew Tridgell wanted to mount a disk share from his Unix host on to a DOS PC. Reverse engineered the SMB/NetBIOS protocol using packet sniffer. Thus was born the SAMBA package as we know it today! Andrew has a big team, with members across the globe contributing to the SAMBA project. UPDATED : Common Internet File System (CIFS) How did SAMBA get started?

NetBIOS Name service netbios-ns 137/tcp, 137/udp NetBIOS Datagram service netbios-dgm 138/tcp, 138/udp NetBIOS Session service netbios-ssn 139/tcp, 139/udp NetBIOS tunneled over TCP/IP protocol makes it routable! The TCP/IP Properties

SMB on the Network Stack

File and Print services Authentication and Authorization Name resolution Service announcement (browsing). Functionality Provided

File and Print services provided by smbd daemon. Name Resolution and Browsing provided by nmbd daemon. Name Resolution - broadcast and point-to-point. WINS server [NBNS (NetBIOS Name Service)]. Computers in a LAN hold an election to decide the Local Master Browser (LMB). The LMB's job is to keep a list of available services that you see in the Network Neighborhood Components

Share Level - single password is given to everyone who is allowed to use the share. User Level - each user has their own username and password and the System Administrator can grant or deny access on an individual basis. Security Levels

Configuration – Global [global] workgroup = SOHO-SMB server string = Samba Server hosts allow = hosts deny = printcap name = /etc/printcap load printers = yes printing = bsd log file = /var/log/samba/%m.log max log size = 0 security = user socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd

Configuration – HOMES [homes] comment = Home Directories browseable = no writable = yes

Configuration – Printers [printers] comment = Printers path = /var/spool/samba browseable = no writeable = no guest ok = no printable = yes

Parameters to be set: domain master = yes preferred master = yes domain logons = yes logon script = %U.bat - per user logon script Configure encrypted passwords encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd Use smbpasswd -a to create encrypted passwords for Samba NT Domain Setup

/sbin/mount.smb /sbin/mount.smbfs /usr/bin/findsmb /usr/bin/nmblookup /usr/bin/rpcclient /usr/bin/smbcacls /usr/bin/smbclient /usr/bin/smbmnt /usr/bin/testparm /usr/bin/testprns Tools/Utilities /usr/bin/wbinfo /usr/sbin/winbindd /usr/bin/smbmount /usr/bin/smbprint /usr/bin/smbspool /usr/bin/smbtar /usr/bin/smbumount /usr/bin/make_printerdef /usr/bin/make_smbcodepage /usr/bin/smbpasswd

Examples smbclient – a ftp like client to connect to a Samba server smbclient //milkyway/homes -U jdoe added interface ip= bcast= nmask= Password: Domain=[SOHO-SMB] OS=[Unix] Server=[Samba 2.2.4] smb: \> help smbmount/mount – mount a Samba share mount -t smbfs -o username=jdoe //milkyway/homes /mnt/samba/ Password:

Source Code Mailing lists Docs and Presentations The Linux Documentation Project – HOWTOs USENET linux.samba, linux.samba.announce, mailing-list.samba, comp.protocols.smb Resources